Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EecS0W3dyXPkOIVe-Qbl5ml656c.roa
File: EecS0W3dyXPkOIVe-Qbl5ml656c.roa (raw, json)
Hash identifier: Y/0e3v3RncPk13G/dTJvWeWCulGoV8pipDL6bQI+A4M=
Subject key identifier: 11:E7:12:D1:6D:DD:C9:73:E4:38:85:5E:F9:06:E5:E6:69:7A:E7:A7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018433D4BB850839CEF01BE5E48DF824D71D
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EecS0W3dyXPkOIVe-Qbl5ml656c.roa
Signing time: Tue 01 Nov 2022 15:34:50 +0000
ROA not before: Tue 01 Nov 2022 15:34:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.58.0/24 maxlen: 24
45.91.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:d4:bb:85:08:39:ce:f0:1b:e5:e4:8d:f8:24:d7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 1 15:34:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11e712d16dddc973e438855ef906e5e6697ae7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e4:7f:2a:3f:d7:9c:91:15:d5:fe:2a:c6:37:
35:a5:35:7b:15:1c:63:6f:89:46:aa:51:94:e1:0f:
c1:92:41:ae:7a:93:37:be:5b:d0:f1:64:d0:3f:11:
09:04:6a:d9:62:eb:21:5d:f2:02:0e:aa:29:38:8c:
84:e9:98:4c:f5:be:f9:ce:cd:0f:db:43:b7:dd:26:
ab:a2:3d:59:b5:ac:6e:85:04:2b:79:08:a2:10:38:
bf:56:2f:75:cf:6a:b4:57:70:92:06:cc:46:ef:de:
35:e8:2e:74:c3:a9:9f:cd:5e:8c:9c:fc:6e:28:74:
04:fe:05:5e:2d:0a:5b:0c:50:54:80:ac:ab:b8:28:
1f:04:b3:0b:4d:7f:fd:f3:b7:6c:bc:71:b7:ae:a9:
50:19:a8:bf:f0:be:31:f5:87:86:ae:98:58:7b:d0:
20:58:be:29:bd:44:70:fc:5e:b5:88:a5:cd:77:77:
fe:78:a4:13:4a:0a:6f:e0:a4:16:49:7d:c4:ee:fb:
ed:a6:23:7f:ab:ac:b3:07:dc:25:9e:3f:2c:e3:a2:
12:c0:ef:d6:6d:52:f6:18:54:fe:e8:3e:13:0c:3c:
4c:92:ab:75:6e:93:ae:86:cc:b3:19:6a:6a:ec:8f:
07:d9:1c:8f:30:6f:aa:84:77:74:98:ed:4f:32:e2:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:12:D1:6D:DD:C9:73:E4:38:85:5E:F9:06:E5:E6:69:7A:E7:A7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EecS0W3dyXPkOIVe-Qbl5ml656c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.58.0/24
45.91.137.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f9:3e:c4:30:91:b0:ae:e9:e6:8c:b2:e1:7d:3b:e8:5a:93:
49:d2:9d:1a:94:09:1a:b0:fe:28:28:d4:b6:0f:f6:d1:6c:fe:
c4:45:4c:8e:4b:12:70:91:99:33:a9:f2:a4:ef:0a:97:8c:7e:
2c:02:05:fb:69:94:6b:7b:ab:40:a7:33:d3:e6:f8:f2:e2:67:
e8:12:01:18:f4:94:49:f3:87:03:5c:7d:6a:4a:c2:3f:9d:5f:
86:cd:9c:8c:9a:cb:4c:b5:9d:54:b8:a1:f8:0c:8d:a4:f8:1f:
e6:ae:89:83:64:40:9f:23:f6:74:0f:47:1d:04:90:18:91:27:
7f:cb:13:94:c7:40:0b:5c:6b:e6:fd:32:f7:3d:c1:be:b9:98:
a5:46:8a:21:bf:51:cf:6e:57:6b:92:ae:52:65:8d:f2:f0:ad:
f9:a9:56:d7:34:61:0c:d0:ca:fd:76:ac:51:0e:7e:16:8b:92:
61:6e:89:41:8f:16:ea:1b:7b:74:bd:8f:62:74:e0:d9:58:10:
89:0c:d0:e5:49:a8:84:ab:5a:7b:c9:3e:97:2b:ac:2e:e6:d4:
36:48:98:89:f1:d4:bd:0e:4d:40:1f:66:8b:67:1a:1a:3a:50:
dd:49:60:18:26:51:21:7f:ea:0a:bf:33:f6:04:1b:e1:7b:3b:
27:e1:a6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org